Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft
File:                     9cf68654-01a9-4653-b981-d0349f39e0a5.mft (raw, json)
Hash identifier:          ed2TrmKjwgnpj0oWoWzMhK0eVpAebkUsY9bVHUagaCw=
Subject key identifier:   D4:0C:39:6A:49:10:2D:60:6C:42:0F:99:B8:5C:F6:87:AA:3B:70:63
Authority key identifier: 18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1
Certificate issuer:       /CN=9cf68654-01a9-4653-b981-d0349f39e0a5
Certificate serial:       010D0C9F43285849815CD9E98B888F4A1BBF4700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft
Manifest number:          010D0C9F432858478AE49FA842FFFA42915D477E
Signing time:             Sat 12 Apr 2025 21:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 21:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 21:00:00 +0000
Files and hashes:         1: 9cf68654-01a9-4653-b981-d0349f39e0a5.crl (hash: 9umuXNk2LR1kvBzuGui8CowtPphlmqA7Am4HMIHQDNY=)
                          2: a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa (hash: MmrPXt8MX76gfR53sX/bg7IeyIMxvVLo2eXOEuYIZBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:5c:d9:e9:8b:88:8f:4a:1b:bf:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cf68654-01a9-4653-b981-d0349f39e0a5
        Validity
            Not Before: Apr 12 21:00:07 2025 GMT
            Not After : Apr 15 21:00:00 2025 GMT
        Subject: CN=ad8bb06d-3e50-4fa4-b757-29bfa61427cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:cd:5e:09:db:a5:cd:c2:b9:19:4b:47:74:
                    53:60:b7:47:4f:2c:3c:a5:92:24:af:52:5f:08:3a:
                    33:1e:2f:92:c3:d0:86:66:86:61:a0:de:a1:1d:b4:
                    4f:47:23:eb:ab:5d:e6:7f:5b:aa:a3:48:2b:65:2f:
                    a5:ed:6a:be:02:3b:26:40:c5:a5:31:28:f9:06:9f:
                    ed:2a:1a:d5:50:dd:1d:1f:1e:d7:51:41:36:0f:af:
                    65:0b:fd:a2:de:92:ce:b6:40:65:0e:79:4e:59:2c:
                    8a:78:79:6b:77:72:55:db:9b:ad:46:c0:ad:0d:d7:
                    71:55:88:5e:80:a9:22:84:b0:13:05:c5:f1:d5:c7:
                    e1:b8:c5:e5:a4:96:1c:46:27:71:99:c5:68:44:e1:
                    e9:a1:c9:2a:82:37:95:9c:bc:9b:77:cd:1f:ca:1a:
                    03:3b:48:60:f4:2c:58:74:10:c1:59:bb:84:1e:0d:
                    58:03:75:73:b2:65:ea:fc:ad:ce:9a:85:66:da:92:
                    6d:9d:15:b0:8b:05:f2:62:cf:1d:be:5d:51:ca:3d:
                    59:08:30:1f:c8:46:5e:61:92:4a:d3:fc:c1:96:40:
                    b6:34:d9:06:90:79:cf:b3:61:a1:f7:a5:08:6d:a1:
                    a8:46:2a:7f:d0:b3:cc:32:0c:8d:ba:6a:df:a2:79:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0C:39:6A:49:10:2D:60:6C:42:0F:99:B8:5C:F6:87:AA:3B:70:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl

            X509v3 Authority Key Identifier:
                keyid:18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9d:49:78:72:33:de:ce:78:c1:cf:bc:84:2a:f8:4b:ac:b3:
         63:0a:97:05:66:4c:75:f5:c3:6f:c1:5a:51:15:bf:cc:98:aa:
         fa:7c:52:09:35:bd:00:1b:c2:82:43:41:2a:28:e7:47:76:8a:
         3c:bb:d9:f7:3e:22:1c:5e:c6:f7:02:47:d9:8d:ad:76:cc:4f:
         ea:c3:69:13:9f:02:41:c1:19:40:a8:70:11:95:f7:ea:7b:11:
         4e:1d:29:38:77:5b:94:ba:8f:50:dd:21:28:bd:07:c6:e8:b7:
         89:ad:f1:21:5e:11:6f:b9:9e:d4:07:84:d2:6b:59:a0:19:c9:
         01:08:18:55:4c:f3:63:bf:90:e0:95:61:e3:2d:7f:a6:10:06:
         c6:10:21:8e:07:22:1c:ee:a0:93:b8:c0:13:c7:93:ca:68:d5:
         c1:d6:98:84:5f:ca:38:b8:e2:a4:e4:82:9d:93:4a:e5:0e:f4:
         e1:89:91:90:11:74:70:94:7c:ce:d3:e0:73:f9:a7:cb:f3:f0:
         6e:3a:ba:01:e4:d1:79:5a:b0:cd:dc:b6:af:e9:a8:0c:08:cf:
         c4:63:b2:59:d2:18:08:2c:f3:2a:3c:e6:84:89:09:28:88:a5:
         fb:d7:7b:ea:9f:86:08:2a:53:c4:58:36:25:0f:57:8c:fe:09:
         8b:d8:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:15 2025 by rpki-client on console.sobornost.net